Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          YJnTYl3Z0TQdfYbmiPvp2SpgIdXB6FD5NARMlgvQz2U=
Subject key identifier:   0F:93:D8:04:62:A5:61:A1:1B:0E:C0:25:20:C6:24:B8:04:F9:EE:A4
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       3F36BE2AC733DEDD0F83177F0BFF5232E2B069D0
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:17 +0000
ROA not before:           Fri 30 Jan 2026 06:36:17 +0000
ROA not after:            Fri 29 Jan 2027 06:41:17 +0000
asID:                     262191
IP address blocks:        190.131.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:be:2a:c7:33:de:dd:0f:83:17:7f:0b:ff:52:32:e2:b0:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:17 2026 GMT
            Not After : Jan 29 06:41:17 2027 GMT
        Subject: CN=0F93D80462A561A11B0EC02520C624B804F9EEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:31:a1:1b:2f:5f:80:cc:ab:12:b0:fb:4d:
                    72:4f:0a:a9:28:b1:81:fe:8a:10:95:17:bf:4f:eb:
                    3c:ce:ac:73:13:6b:1b:36:03:0a:52:0d:40:7d:6a:
                    48:dd:8b:08:44:81:e8:e4:56:a1:c7:ec:39:4b:c7:
                    a6:01:bf:88:10:43:61:26:47:4d:70:01:dd:9d:41:
                    94:c5:7e:3f:f7:84:a2:b8:61:b1:64:21:84:01:b0:
                    08:de:7a:16:10:a8:7b:a5:78:59:85:c6:29:1a:ca:
                    46:73:b5:81:cc:d6:73:10:2b:59:19:10:cb:a4:26:
                    16:e7:19:98:2b:6f:f4:06:58:e8:d2:50:9c:b6:f1:
                    29:ee:4c:ac:51:51:8f:0d:28:d7:11:33:68:dc:02:
                    21:0f:a9:f7:86:71:83:fd:c9:21:04:8f:10:b1:d7:
                    8c:08:cb:cd:9d:67:08:c6:81:f8:6e:1d:b8:fd:cb:
                    21:5d:7e:8b:04:88:75:92:66:fb:b8:33:c1:f1:0f:
                    5f:e9:1f:c8:71:78:89:3a:44:94:c3:ff:90:32:05:
                    ef:32:55:c7:ee:d1:a5:a7:49:a0:41:58:78:81:97:
                    71:8d:db:79:2e:bd:68:12:0e:1c:79:d4:bf:53:38:
                    70:36:fb:78:75:c2:46:e7:cf:54:87:f2:63:fe:bf:
                    30:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:93:D8:04:62:A5:61:A1:1B:0E:C0:25:20:C6:24:B8:04:F9:EE:A4
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:d0:2d:1f:d8:b0:26:36:e5:29:a2:02:0c:68:f7:4c:ff:04:
         92:64:77:7e:04:8a:be:16:88:60:be:88:e1:54:fd:7d:a4:e9:
         03:d9:cd:6f:a7:cd:10:d7:89:1b:47:44:1c:83:cb:6c:ae:1b:
         5e:e6:a6:1d:59:08:45:80:f0:e4:5d:aa:1b:03:ab:68:60:ee:
         2d:47:ee:fd:7e:fa:88:37:e5:f8:07:6e:cd:a2:aa:66:45:a7:
         2c:71:a4:ea:fb:b9:61:8b:60:62:d7:5e:38:d8:e5:8a:18:b7:
         3d:91:87:3c:ce:95:aa:e1:67:95:84:b2:e2:ef:18:f6:fc:ba:
         38:8f:47:7d:56:54:30:70:65:74:f5:c6:a9:84:c5:17:76:59:
         e0:c8:10:38:6b:51:24:a5:e9:ed:b0:08:25:ff:f5:dd:a4:d0:
         d0:79:bb:23:72:1f:37:1f:03:b3:5c:d1:22:74:13:2e:50:40:
         39:bb:6f:f2:e1:0d:f1:51:3b:80:58:3b:01:21:ab:f5:31:bf:
         a5:5a:f4:fe:e0:06:28:be:94:43:ee:c7:56:41:11:e3:4c:30:
         41:43:23:1f:5a:eb:22:fc:86:f1:f7:4f:ae:14:4e:a0:f5:5c:
         c7:b8:f3:e0:1c:c4:0a:23:e2:bb:a4:54:c0:d9:5b:58:fb:2b:
         35:1e:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:43 2026 by rpki-client